VDB
KO

GO-2026-5388

Nhost Leaks Refresh Tokens via URL Query Parameter in OAuth Provider Callback in github.com/nhost/nhost

Details

Nhost Leaks Refresh Tokens via URL Query Parameter in OAuth Provider Callback in github.com/nhost/nhost

Are you affected?

Enter the version of the package you're using.

Affected packages

Go / github.com/nhost/nhost
Introduced in: 0 Fixed in: 0.0.0-20260330133707-294954e0fc3a
Fix go get github.com/nhost/nhost@v0.0.0-20260330133707-294954e0fc3a

References